Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
SolvedPrivate

What's The Advantage of SCCM Over WSUS?

Posted on 2014-11-18
6
25 Views
Last Modified: 2016-02-20
Points of My Scenario:
1. I am admin of a Windows domain that has a WSUS server
2. Servers run Windows Server 2008 R2 - including domain controllers and WSUS server
3. I have to assist management in deciding whether to replace WSUS with SCCM to deploy Windows updates
QUESTION: What are the advantages of deploying Windows updates by SCCM over WSUS?
0
Comment
Question by:waltforbes
6 Comments
 
LVL 17

Expert Comment

by:pjam
ID: 40449690
SCCM deploys software.  Very complicated setup, but beneficial if you need to deploy large updates to users.  Not for a small userbase.
My two cents
0
 

Author Comment

by:waltforbes
ID: 40449731
Hi pjam. I plan to use SCCM ONLY for Windows updates/security patches. My chief concern is whether SCCM allows for much greater control over the timing of the release of updates. Do you know?
0
 
LVL 17

Assisted Solution

by:pjam
pjam earned 50 total points
ID: 40449770
Then I would definitely stick with WSUS.  I believe SCCM comes at too high a cost to fool with for updates only.  WSUS should give you all the control you need.
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
LVL 6

Assisted Solution

by:Rob G
Rob G earned 50 total points
ID: 40450429
I would suggest WSUS over SCCM for what you are planning.. SCCM is for enterprise software updates, not windows updates only.. everything you can do with WSUS in windows updates, you get the same thing in SCCM with windows updates, but get to pay for it..

WSUS does have a plugin (Not "officially" supported) to provide 3rd party updates as well.. and does a pretty good job..
https://wsuspackagepublisher.codeplex.com/
0
 
LVL 17

Accepted Solution

by:
Mike T earned 400 total points
ID: 40452016
Hi,

We need more information to advise. Specifically how many machines do you have, how many updates are you talking about and how good is your network links? If you are a small company in one building with 100 machines then it's probably better to use WSUS.
SCCM uses WSUS to fetch the updates and the Windows Update Agent to pull them to the clients, so it's actually SCCM+WSUS or WSUS. The catch is do NOT configure WSUS at all. Do everything through SCCM's GUI.

As for benefits, it has more control over rebooting, has maintenance windows, update lists and easy targeting using collections. It is generally for medium to large companies owing to the cost. It's a huge product and if you're sensible will *start* using it for almost everything (OS deployment, config lockdown, inventory etc) not "just updates". However many people seem to stick to just two features, mainly because they don't know any better and lack the experience or training. It does have full reporting to report patch/security compliance. That is probably the biggest win over WSUS which is very poor on reporting.

An alternative might be another 3rd party patch tool if you only want patching. Shavlik did offer a superb product but I'm not sure it's still available.

Mike
0
 

Author Closing Comment

by:waltforbes
ID: 40479506
Hello Mike T, your advice is the most comprehensive. I will have to pursue SCCM based on this advice due to greater control over rebooting, maintenance windows, and better reporting.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Microsoft Windows Server Update Service (WSUS) is free for everyone, but it lacks of some desirable features like send an e-mail to the administrator with the status of all computers on the WSUS server. This article is based on my PowerShell script …
What to do when Windows Update is not working correctly? What tools can I use to detect the cause of the malfunction problem? What does this numeric error code mean? These and other questions that you have been asking in the past are answered here (…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question